"credential_process" does not work when using "login_session" in .aws/config file

[gabrielbac]

Describe the feature

It would be nice if "credential_process"work when using "login_session". So I don't have to type 'aws login' every time.

Use Case

If my config file has this section:

[profile profile1]
login_session = awe:aws:sts::0123456789012:assumed-role/role1/user1
region = us-east-1
credential_process = aws login --profile profile1

so when I try to use the profile1 and my credentials expired, the command aws login --profile profile1 is automatically invoked.

Currently we just get the message saying Your session has expired. Please reuthenticate with 'aws login'

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CLI version used

2.32.13

Environment details (OS name and version, etc.)

MacOS

[janpapenbrock]

Typo in creadential_process is just here or also in your real config file?

[gabrielbac]

Typo is just in the ticket. My config file is proper.

[oshaughnessy]

Yes, please. We depend on the credential_process flow for our enterprise setup. This would be really helpful for streamlining our day-by-day dev workflows.

[adev-code]

Hello, thank you for reaching out. The CLI will automatically refresh these credentials for up to 12 hours [1]. However, the session has a maximum duration of 12 hours as per IAM. Once 12 hours have passed, the session needs to be re-authenticated.

In regards to:

It would be nice if "credential_process" does not work when using "login_session".

Could you clarify what you mean by this?

Thank you.

[gabrielbac]

Hello, thank you for reaching out. The CLI will automatically refresh these credentials for up to 12 hours [1]. However, the session has a maximum duration of 12 hours as per IAM. Once 12 hours have passed, the session needs to be re-authenticated.

In regards to:

It would be nice if "credential_process" does not work when using "login_session".
Could you clarify what you mean by this?

Thank you.

It was a typo sorry. I edited the ticket.